Modula Gallery Photo Grid & Video Gallery Plugin Vulnerability

The Modula Gallery – Photo Grid & Video Gallery plugin for WordPress is a popular image gallery plugin used by many websites to display and manage photos and videos. This vulnerability allows attackers to execute arbitrary code on the server by manipulating user-supplied directory paths, which can lead to unauthorized access to sensitive data.

Specific version info not stated in the advisory.

To fix this vulnerability, upgrade to Modula Gallery Photo Grid & Video Gallery plugin version 2.13.3 or later. You can download the latest version from the WordPress Plugin Directory: https://wordpress.org/plugins/modula-best-grid-gallery/

Immediate mitigations:

• Restrict network access to your WordPress installation (firewall it from the public internet)
• Audit admin account activity for suspicious access patterns
• Monitor for unauthorized token creation

• plugins.trac.wordpress.org
• plugins.trac.wordpress.org
• plugins.trac.wordpress.org
• plugins.trac.wordpress.org
• research.cleantalk.org
• www.wordfence.com